News for hackers. Stuff that matters.
Re:Please stop flooding our projects with AI slop to furnish... by smooc on Friday August 28, 2026 @01:26AM (#49474688)
So the fixes are still fixes, but we (I am also a OSS maintainer) are unwilling to accept them as they boost the contributor’s status where we think the merit is very or extremely limited.

Why not have these PRs counted differently (by the platform), and/or colored differently in the timeline(s) thus made less visible or more clear?

Re:Please stop flooding our projects with AI slop to furnish... by Arainach on Friday August 28, 2026 @01:36AM (#49474744)
Change is bad unless it's great.

Unless the change is an obvious improvement, it has to be worth the time for the maintainers to spend attention reviewing it (and supporting the code forever, and all the rest).

Even if these particular changes are "harmless" and easy to review, accepting them sets a precedent that encourages an unsustainable flood of AI-generated changes that will overwhelm the project.

Re:Please stop flooding our projects with AI slop to furnish... by brabel on Friday August 28, 2026 @02:45AM (#49475156)
That’s a totally unnecessary high bar you’re setting. Most change is mediocre (a tautology, I realize). I really don’t believe that you can think that fixing a bunch of spelling mistakes is not a small improvement.

About setting a precedent: if you think like that you probably never accept any contributions at all, by humans or otherwise. Contributions by strangers have always been very minor things in general, things that the author cared enough about to make a pull request. In this case I don’t see the difference except for the fact that ai was used. If you just don’t accept ai at all , fine. But just be clear about it. In this case they are calling spelling correction slop. That’s not what slop means. Pretending human contributions were always “great” and nothing else would do is kind of ridiculous and shows a lack of experience in open source.

Re:Please stop flooding our projects with AI slop to furnish... by Arainach on Friday August 28, 2026 @03:11AM (#49475342)
It's not an unnecessarily high bar.

Change is bad. It takes engineers time to understand and approve. It confuses users. Changes should be made for good reasons, not frivolously.

Just because writing code is easier does not mean you should write more of it. It is more important than ever to carefully consider what you work on and what work you accept.

The user says "this is just spelling corrections" but a maintainer - a volunteer - needs to read all the files and make sure it's harmless and doesn't introduce security vulnerabilities, change meanings, and so on. That's not free.

Re:Please stop flooding our projects with AI slop to furnish... by 21asdffdsa12 on Friday August 28, 2026 @02:11AM (#49474933)
These fixes, regularly destroy the architecture, accrue bloat for little gain, refuse to rewrite while demanding to rewrite- and many other such funny noises. Most code contribution by LLMs is garbage if you long-term care about the project. Look at closed source projects that ingest all this madness - windows with its seconds to open the explorer and other catastrophes.
Re:Please stop flooding our projects with AI slop to furnish... by bwhiting2356 on Friday August 28, 2026 @01:38AM (#49474755)
Why not let them have the status boost? This isn't zero sum.
Re:Please stop flooding our projects with AI slop to furnish... by hypfer on Friday August 28, 2026 @01:40AM (#49474768)
> This isn't zero sum.

True, it is actually negative sum, because fake merit erodes trust in real merit, as it makes it a lot harder to spot the latter.

Re:Please stop flooding our projects with AI slop to furnish... by streetfighter64 on Friday August 28, 2026 @02:26AM (#49475028)
I think Goodhart's law applies really well here. When people make commits for the sake of having made a commit to some famous repo, the "merit" that a commit measures is already useless. Remember Hacktoberfest 2020, before LLMs were popular? https://news.ycombinator.com/item?id=24643894
Re:Please stop flooding our projects with AI slop to furnish... by brabel on Friday August 28, 2026 @02:54AM (#49475224)
What merit was there to have anyway. Would the author accept the same changes from a human?? I am inclined to believe they would, I certainly would. Would you have attributed merit to someone just fixing typos? I mean it’s quite helpful. But I wouldn’t think a commit fixing typos ever attributed merit to a developer. So it’s hard to understand the problem with AI doing this. If it was a bot like dependabot but for fixing grammar errors would that be a problem? I assume no, hence the problem is entirely that the human author of the PR is being attributed nonexistent merit by people who should know better.
Re:Please stop flooding our projects with AI slop to furnish... by streetfighter64 on Friday August 28, 2026 @03:01AM (#49475285)
Well, as I mentioned there was already in 2020 the problem of (human-generated) slop commits causing unnecessary work for maintainers.

The commit in itself might add some minuscule value to the project, but when you take into account the time it takes to check the commit and approve it, you're probably back at negative value again.

Plus, there's the problem of people doing this in an adversarial way. How can you tell whether a random commit touching 100 files is the work of an enthusiastic beginner, or a malicious hacker that's hidden a subtle attack somewhere? Well, you need to spend your time carefully checking it.

So it's way more pragmatic just to set up some automated filter to put all of this stuff in the bin.

Oh and by the way:

> I wouldn’t think a commit fixing typos ever attributed merit to a developer.

The first sentences of the article in question:

> Successful contributions to open source projects are a kind of currency. GitHub in particular encourages this in a number of ways: [...] Potential hiring managers often take note of this. Recruiters often find and screen candidates this way.

Re:Please stop flooding our projects with AI slop to furnish... by tancop on Friday August 28, 2026 @09:42AM (#49478331)
Why should a maintainer care about keeping PR count as a signal of developer status? A good quality contribution is a good quality contribution. You only have a responsibility to your own users, keeping out bad code from your repo while accepting as much good code as you can without getting overworked. You don't have to look after other people status games.

If you judge first time contributors on accepted PRs that's as dumb as doing it based on their activity. It tells you nothing about quality. You're the stupid one for assuming all maintainers are as strict as you are.

Re:Please stop flooding our projects with AI slop to furnish... by pibaker on Friday August 28, 2026 @05:23PM (#49484394)
It's less about being a maintainer and more about being on the SWE job market. Making it possible for any person to appear to be a prolific open source contributor even though his contributions are net negative for the projects he contributes to hurts the contributors who actually make improvements.
Re:Please stop flooding our projects with AI slop to furnish... by selfhoster1312 on Friday August 28, 2026 @03:05AM (#49475308)
Because letting sloperators near your codebase, even for a very minor obvious and correct change, may have long-term negative consequences for your project. It sends a signal to other sloperators to keep doing what they do, when we really need to send them a signal to get a life, learn a craft, and let Claude burn in hell.
Re:Please stop flooding our projects with AI slop to furnish... by bulbar on Friday August 28, 2026 @02:02AM (#49474877)
Because every merge request and every merge comes with cost and (potential) more cost in the future.

Linux lately received a lot of fixes for drivers nobody has cared about for ages. They decided to remove them. Maybe they should have done this earlier, I don't know, but that happened because every code change comes with cost down the line. For real contributers, this cost is much more limited and they have a higher probability of burden the cost down the line.

Pure AI MRs are just rude, because it's just "here take this, don't really care what this is, but AI said it being good, I won't be around, so you will have to deal with this code after the merge and you better don't overlook anything, because I personally don't really know what I am doing, I only know how to have AI making something that looks convincing. Good luck fixing the bugs this change introduces".

Re:Please stop flooding our projects with AI slop to furnish... by croes on Friday August 28, 2026 @01:52AM (#49474826)
Boost for what? That they can type a prompt?

How do you distinguish those who know what they are doing from those who only can write a prompt and copy the result?

Making the haystack bigger is a bad idea if you search the needle

Re:Please stop flooding our projects with AI slop to furnish... by SmarsJerry on Friday August 28, 2026 @11:13AM (#49479776)
Surprisingly prompting takes skill. The more you know about something the more precise you can be and the better AI actually works. I’ve found just saying “here is my bug/issue, fix this” is about the absolute worst way thing you could do, but give it a clear direction and precise step by step instructions and it will not only do well but sometimes blow your mind.
Re:Please stop flooding our projects with AI slop to furnish... by hypfer on Friday August 28, 2026 @01:31AM (#49474708)
The whole idea of "counting PRs" as a vanity metric is flawed because vanity metrics are flawed.

I don't think that there is a technical solution to be found here, as the problem is anything but technical.

__

A hack/trap:

Comment "Ah yes thanks a lot for the hint :)", then make the changes yourself.

Then see how the person reacts to that.

Hack the grifters. Hack the planet.

Re:Please stop flooding our projects with AI slop to furnish... by flyingshelf on Friday August 28, 2026 @01:37AM (#49474745)
My solution is to ask them for proof of work. Many of these disappear after opening a PR that they never tested. How can you claim to have fixed a visual issue without a screenshot? Insta-close.
Re:Please stop flooding our projects with AI slop to furnish... by initramfs on Friday August 28, 2026 @02:41AM (#49475136)
I have noticed a lot of my Github followers who are either newer students or just new to Github have an immaculate green board of commits on their profile page, but it's so over the top I only like the ones that have creative illustrations or just very limited edits. Some seem so automated that it's hard to know how much they actually work on it. Others even are programmed to follow accounts then drop off once the person doesn't reciprocate, which is technically better than them staying but also systematically checking what sticks (also Github should limit some of these automated follows).
Re:Please stop flooding our projects with AI slop to furnish... by __david__ on Friday August 28, 2026 @01:39AM (#49474763)
Or just pull the pr into your local git, git amend --reset-author, and then push it to master yourself.
Re:Please stop flooding our projects with AI slop to furnish... by stackghost on Friday August 28, 2026 @02:10AM (#49474928)
Merging commits/PRs without reading them is how you get a 2024 xz situation.
Re:Please stop flooding our projects with AI slop to furnish... by kodoman on Friday August 28, 2026 @02:36AM (#49475096)
Not just that how the maintainer was treated by the attacker which tells you something about the way people feel entitled to maintainers time and efforts for nothing even by people not looking to exploit the project. And the abuse after he received despite it being an easy mistake that the culture encourages people to make.
Re:Please stop flooding our projects with AI slop to furnish... by hypfer on Friday August 28, 2026 @02:40AM (#49475127)
> And the abuse after he received despite it being an easy mistake that the culture encourages people to make.

I believe that that was in part simply people defending their reality.

Because if it's not the maintainers fault, then why did it fail? What are the implications of that? What does it mean for me personally? Do I have to do something differently? Do I have to change my assumptions?

People do not like these feelings. They want to simply push them away. The easiest way of doing so is blaming that guy and being done with the negative emotion.

Most people do suck at this whole "being human" business.

Re:Please stop flooding our projects with AI slop to furnish... by __david__ on Friday August 28, 2026 @02:46AM (#49475166)
I never suggested that you shouldn’t check the commit before merging!
Re:Please stop flooding our projects with AI slop to furnish... by yard2010 on Friday August 28, 2026 @02:25AM (#49475020)
It still haunts me, that dot they slipped in, in one of the commits, every time I merge a PR
Re:Please stop flooding our projects with AI slop to furnish... by Uptrenda on Friday August 28, 2026 @02:08AM (#49474915)
I think what you're saying is fair, tbh. Imagine you put in months or years into a project to make it a quality piece of work. It develops into something notable and you took all the risk. Then someone comes along to fix a spelling error with a pull request so their name effectively appears on the repo as a "contributor." And you just know right after its going on their resume as "contributed to [...]" or maybe if they're bold "software engineer working on [...]" which implies substantial investment. Then you're effectively sharing credit for YOUR work with someone who did nothing. That is rage inducing. ((Of course: it probably is just juniors trying their best in this horrible industry.))

On the other hand: lets be careful not to dismiss valid but inexperienced attempts to contribute. Having someone want to genuinely contribute to your software is incredibly generous. If someone seems like they're trying its better to give advice than act like a snob because its not good enough. Often pull requests only need small fixes to get in, anyway.

Re:Please stop flooding our projects with AI slop to furnish... by insane_dreamer on Friday August 28, 2026 @07:43PM (#49485524)
> So the fixes are still fixes,

maybe, the maintainer would need to review them to determine that, and that can be time-consuming especially because LLMs tend to provide walls of sometimes dense text

since the human submitting the PR (if there is one) couldn't be bothered to understand whether the change is a valid one (and therefore submit the change as their own work), why should the maintainer take on that work. if they wanted an LLM to find bugs in their code they could run it themselves with less work than sorting through LLM-generated PRs.